A masking notation, used in Cisco ACLs and similar configurations, whose bit meaning is the inverse of a subnet mask.
While a subnet mask uses "1" to represent the network portion, a wildcard mask uses "0" to mean a bit that must match and "1" to mean a bit that can be anything. This inverted meaning is a well-known point of confusion for people new to networking.
© 2026 ITBGM